Page 1 of 1

no error with LDAP but no user in database

PostPosted: Fri Jun 24, 2011 3:39 pm
by mmoulis
Hi!

I've installed OMERO.server on Ubuntu Server 10.04.
I try to connect it to the Active Directory of my Lab.
I make a $ omero config get and I get these following lines :

omero@OMERO:~$ omero config get
omero.data.dir=/home/omero/OMERO
omero.db.name=omero
omero.db.pass=*********
omero.db.user=omero
omero.ldap.base=OU=IP3D,OU=Personnel Imagerie,OU=Imagerie,DC=crtriv,DC=fr
omero.ldap.config=true
omero.ldap.password=*************
omero.ldap.urls=ldap://10.1.1.12:389
omero.ldap.user_mapping=omeName=cn,firstName=givenName,lastName=sn,email=mail
omero.ldap.username=CRTRIV\omero
omero.web.application_server=fastcgi-tcp
omero.web.webgateway_cache=/omero/var/weblitz_cache

When I check log files, there is no error with ldap, and so, it seems to work well but when I go the webadmin with administrator rights, I do not have any new user.

Any ideas ?

Re: no error with LDAP but no user in database

PostPosted: Fri Jun 24, 2011 3:55 pm
by jmoore
Have any of your users tried logging in and failed? From http://www.openmicroscopy.org/site/support/omero4/server/install-ldap:

This allows OMERO users, ''Experimenters'' or ''Scientists'' in OMERO parlance, to be automatically created and placed in groups according to your existing institution policies.


This may not be as clear as it should be, but what it means is that as your users try to login, they will have their records copied to OMERO. No synchronization of user name or information takes place. Their passwords, however, will always be checked directly against LDAP.

Cheers,
~Josh.

P.S. by the way, there's an open ticket that you may want to watch for support of "periodic synchronization": http://trac.openmicroscopy.org.uk/ome/ticket/2028

Re: no error with LDAP but no user in database

PostPosted: Mon Jun 27, 2011 11:29 am
by mmoulis
Thanks a lot!

Indeed, I do not got right meaning of the LDAP support. Everything works well! Sorry for the inconvenience.

Re: no error with LDAP but no user in database

PostPosted: Mon Jun 27, 2011 5:19 pm
by jmoore
No problem at all. Glad to help!
~Josh